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LISTING OF THE CLAIMS: 

What is claimed is: 

1 . (Currently Amended) A digital signature method to be performed by a computer 
based on braid group conjugacy problem, parameters involved in this method comprising a 
signatory (S), a signature verifying party (V), a message (M) needing signature, a braid group 
B n (/) divided into a left subgroup LB m (/)and a right subgroup RB n _ 2 _ m (l), an integer n for a 

number of generators in the braid group B n (/), an integer m for a number of generators in a 
left subgroup LB m (/) , an integer / for an upper bound of a length of a braid, a one way hash 
function h from bit sequence {0,1}* to braid groups B n (l); said signature method comprising 
the following steps of: 

Step 1 .a signatory (S) selecting a braid x generated from the left subgroup LB m (/) , a 

second braid x ' generated from the braid group B n {l), and a third braid a generated from the 
braid group B n {l), by the computer, wherein the computer is adapted to m d-making them 

meet x = a~ l xa , moreover, with known x and x\ it being impossible to find a in calculation, 
and considering a braid pair (x\x) as a public key of signatory (S), a as a private key of 
signatory (S); 

Step 2. signatory (S) using hash function h for message (M) needing signature , by the 
computer, wherein the computer is adapted to get y = h(Af) from the braid group B n (l); 

Step 3. generating a braid b from the right subgroup RB n _ t _ m (/)at random, by the 
computer, wherein the computer is adapted to then signing the message (M) with the private 
key a and a generated random braid b to obtain Sign (m) = a~ l byb~ l a ; and 

Step 4. the signatory (S) outputting , by the computer, message (M) and a signature of 
message (M) Sign(M). 

2. (Previously Presented) The digital signature method based on braid group conjugacy 
problem according to claim 1 , wherein generating the public key braid pair (x f ,x) and the 
private key braid a of signatory (S) in said step 1 comprises the following steps of: 

Step la. selecting a distance d between system parameter braid groups public key 

pairs; 
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Step lb. representing x into a left canonical form x = £?n x n 2 - - - tt 1 ; 
Step lc. selecting a braid b at random to belong to a set B n (5 I) 
Step Id. calculating x — b~ l xb,a = & ; 

Step le. generating a bit at random, if 1, calculating x = decycling(x r \ a = an l ; if not 

1, calculating x r = cycling{x'\a =ar u (7T 1 ); 

Step If. judging whether x' belongs to SSS(x) and whether l(x f ) < d, if all the 
conditions are yes, outputting the braid pairfx, x) as the public key, a as the private key; if 
either of them is not, performing step le. 

3. (Previously Presented) The digital signature method based on braid group conjugacy 
problem according to claim 1, wherein the process for obtaining y - h(M) <e B n (l)by using 

the hash function h in said step 2 comprises the following steps of: 

Step 2a, selecting an ordinary hash function H, with a length of output H(M) is / 

[log(2,n!)]> then dividing H(M) into / sections ^i||^ 2 ||- • -|^/ m equal at one time; 
Step 2b, corresponding Ri to a permutation braid Ai, then calculating 

h(M)=Al*A2..Ah that is the h(M) required. 

4. (Previously Presented) The digital signature method based on braid group conjugacy 
problem according to claim 1 , wherein a integer n for the number of generators in a braid 
group is in the range of 20-28, an upper value of the braid length is 1=3, d=4, and an left 
subgroup n-m=4. 

5. -7. (Canceled) 

8. (Currently Amended) A method for digital signature to be performed by a computer 
configured to calculate data based on braid groups conjugacy problem and verification 
thereof, parameters involved in this method comprising a signatory (S), a signature verifying 
party (V), a message (M) needing signature, a braid group B n (l) divided into a left subgroup 

LB m (/) and a right subgroup RB^^ (/) , an integer n for a number of generators in the braid 

group B n (l) 9 an integer m for a number of generators in the left subgroup LB m (/), an integer / 
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for an upper bound of a length of a braid, a one way hash function h mapped from bit 
sequence {0,1}* to braid groups B n (l); comprising the following steps of: 

Step 1 . the signatory(S) selecting a braid x generated from the left subgroup LB m (/), a 

second braid x ' generated from the braid group B n (/), and a third braid a generated from the 

braid group B n (l\ by the computer, wherein the computer is adapted to a nd-making them 

meet x - a~ l xa , moreover, with the known x and x\ it is impossible to find a in calculation, 
and considering a braid pair (x',x) as a public key of the signatory (S), a as a private key of 
signatory (S); 

Step 2. signatory (S) using a hash function h for message (M) needing signature , by 
the computer, wherein the computer is adapted to get y = /z(m) from the braid group B n (l); 

Step 3. generating a braid b from the right subgroup RB n _ t _ m (/)at random, , by the 
computer, wherein the computer is adapted to t hefl-signing the message (M) with the private 
key a and the braid b generated randomly to obtain Sign (m) = a~ l byb~ l a ; 

Step 4. the signatory (S) outputting , by the computer, the message (M) and its 
signature Sign(M) to the signature verifying party (V); 

Step 5. the signature verifying party (V) obtaining , by the computer, the public key of 
signatory (S) after receiving the message (M) and the signature of message (M) Sign (M) 
transmitted from signatory (S); 

Step 6. calculating message M, by the computer, wherein the computer is adapted to 
calculate message M by employing a system parameter hash function A, to obtain y= h (M); 

Step 7. judging whether sign(M) and y are conjugate or not, by the computer, wherein 
the computer is adapted to perform the judging; if not, sign(M) is an illegal signature, the 
verification fails; if yes, perform step 8; and 

Step 8. calculating sign(M) x f and xv , by the computer, wherein the computer is 
adapted to calculate signfM) x f and xv by using the obtained public key of signatory (S), and 
judging whether they are conjugate or not, if not, sign(M) is an illegal signature, and the 
verification fails; if yes, sign(M) is a legal signature of message (M). 

9. (Previously Presented) The method according to claim 8, wherein generating the 
public key braid pair (x\x) and private key braid a of signatory (S) in said step 1 comprises 
the following steps of: 
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Step la. selecting a distance d between system parameter braid groups public key 

pair; 

Step lb. representing x into left canonial form x = t?7Z x n 2 . . . n x ; 
Step lc. selecting a braid b at random to belong to set B n (5 I) 
Step Id. calculating x - b~ l xb,a - b ; 

Step le. generating a bit at random, if 1, calculating x = decycling{x\ a = an l ; if not 

I, calculating x = cycling(x\a =ar u (7T l ); and 

Step If. judging whether x f belongs to SSS(x) and whether l(x') < if all conditions 
are yes, outputting the braid pair fx, x r ) as the public key, a as the private key; if either of them 
is not, performing step le. 

10. (Previously Presented) The method according to claim 8, wherein the process for 
obtaining y = h{M ) <e B n (/)by using hash function h in said step 2 comprises the following 
steps of: 

Step 2a. selecting an ordinary hash function H, with a length of its output H(M) is / 
[log(2, nl)], then dividing H(M) into / sections ^i||^ 2 |- • \ R i m equal at one time; and 

Step 2b. corresponding Ri to a permutation braid Ai, then calculating 
h(M)=Al *A2...Al, that is the h(M) required. 

I I . (Previously Presented) The method according to claim 8, wherein n for the number of 
the generation braids in the braid group is in the range of 20- 28, an upper value of the braid 
length is 1=3, d=4, and an left subgroup n-m=4. 

12. (Previously Presented) The method according to claim 8, wherein algorithm BCD A is 
employed in judging whether sign(M) and y are conjugate or not in step 7 and judging 
whether sign(M) x' and xy are conjugate or not in step 8. 

13. (Previously Presented) The digital signature method based on braid group conjugacy 
problem according to claim 2, wherein a integer n for the number of generators in a braid 
group is in the range of 20-28, an upper value of the braid length is 1=3, d=4, and an left 
subgroup n-m=4. 
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14. (Previously Presented) The digital signature method based on braid group conjugacy 
problem according to claim 3, wherein a integer n for the number of generators in a braid 
group is in the range of 20-28, an upper value of the braid length is 1=3, d=4, and an left 
subgroup n-m=4. 

15. (Previously Presented) The method according to claim 9, wherein n for the number of 
the generation braids in the braid group is in the range of 20-28, an upper value of the braid 
length is 1=3, d=4, and an left subgroup n-m=4. 

16. (Previously Presented) The method according to claim 10, wherein n for the number of 
the generation braids in the braid group is in the range of 20-28, an upper value of the braid 
length is 1=3, d=4 9 and an left subgroup n-m=4. 
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